Gerson & Schwartz Accident & Injury Lawyers Listed by pear Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to single out professional-services firms that hold large volumes of sensitive client records, using data theft as leverage even when systems are restored. On 29 October 2025 the Miami personal-injury practice Gerson & Schwartz Accident & Injury Lawyers appeared on the leak site of the ransomware group known as pear, which claimed to have exfiltrated internal files. The number of people affected remains unknown and public detail is limited, yet any confirmed exposure of a law firm’s case files carries lasting consequences for clients already navigating injury or wrongful-death claims.

The listing itself is an unverified claim by the group; no independent confirmation of the full scope or method has been released. What is known is that the firm was named in connection with a ransomware attack that involved the removal of internal files.

Breaking down the breach

According to the available record, Gerson & Schwartz Accident & Injury Lawyers was listed by the pear ransomware group on 29 October 2025. The group stated that internal files had been exfiltrated during a ransomware attack. No figure for the number of individuals affected has been published, nor have the precise date of intrusion, the initial access vector, or the volume of data been disclosed. Public reporting simply notes the firm’s appearance on the group’s leak site and the claim of internal-file theft. Whether encryption was also deployed, whether a ransom demand was made, or whether any data has actually been released remains unconfirmed.

Inside pear

Pear is a ransomware operation that follows the now-common double-extortion model: after gaining access to a network, operators copy selected data before encrypting systems and then threaten to publish the stolen material if payment is not received. Like many contemporary groups, pear maintains a public leak site where it posts victim names and, in some cases, sample files to increase pressure. The group’s listings are claims rather than independently Reported Facts; they serve as both advertisement and coercion. Prior activity attributed to pear has typically targeted mid-sized organisations that store concentrated personal or commercial records, though the group has not released further technical details specific to this incident beyond the assertion that internal files were taken.

About Gerson & Schwartz Accident & Injury Lawyers

Gerson & Schwartz Accident & Injury Lawyers is a Miami-based firm that represents clients in matters arising from accidents, personal injuries and wrongful death. Law practices of this type routinely collect and retain medical records, insurance correspondence, financial documents, witness statements, and detailed personal identifiers needed to build civil claims. Because the firm’s work centres on individuals who have already suffered harm, any compromise of its systems can expose people who are already in vulnerable circumstances. The firm’s appearance on a ransomware leak site therefore raises immediate questions about the confidentiality of ongoing and past client matters.

The information in question

The only data type named in the public record is “internal files” said to have been exfiltrated. No inventory of specific document categories, client names, or record counts has been released. Organisations that handle personal-injury and wrongful-death litigation typically store medical histories, Social Security numbers, addresses, employment details, settlement negotiations and litigation strategy. Whether any of those categories were among the files claimed by pear cannot be confirmed from the available information. Until the firm or independent investigators publish a verified list, the exact contents remain unconfirmed.

The real-world impact

For clients, the primary risk is the possible misuse of highly personal information—medical diagnoses, financial circumstances, or details of traumatic events—that could be used for identity theft, targeted fraud, or unwanted contact. Even if the data never appears on public forums, the mere possibility of exposure can create lasting anxiety and require ongoing monitoring of credit and medical records. For the firm itself, the incident may trigger regulatory notification duties, potential civil claims from affected clients, and the operational cost of forensic investigation and system hardening. Because the number of people affected is still unknown, the full scale of these consequences cannot yet be measured.

Were you affected?

If you have been a client of Gerson & Schwartz Accident & Injury Lawyers, treat the listing as a prompt to act rather than as proof of personal exposure. Request a formal notice from the firm confirming whether your records were involved. Monitor bank and credit accounts for unusual activity, place a fraud alert with the major credit bureaus if you choose, and consider freezing credit files. Change passwords on any accounts that may have shared credentials with the firm’s portals. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Stay alert for phishing messages that reference the firm or the incident, as criminals frequently exploit public breach news to craft convincing scams.

AICompiled with AI assistance from public sources and published under our editorial standards.